ci: add java client release workflow

2026-07-20 15:02:27 +00:00 · 2026-07-07 23:17:44 -07:00
parent ff37d5f02d
commit caa63546b1
1 changed files with 127 additions and 0 deletions
@@ -0,0 +1,127 @@
+name: "release: java clients"
+
+# Publishes the SeaweedFS Java clients (seaweedfs-client and
+# seaweedfs-hadoop3-client) to Maven Central via the Sonatype Central Portal.
+#
+# Required repository secrets:
+#   MAVEN_CENTRAL_USERNAME  - Central Portal user token username (central.sonatype.com -> Account -> Generate User Token)
+#   MAVEN_CENTRAL_PASSWORD  - Central Portal user token password
+#   MAVEN_GPG_PRIVATE_KEY   - ASCII-armored signing key:
+#                             gpg --homedir <keyring> --armor --export-secret-keys <KEYID> > key.asc
+#   MAVEN_GPG_PASSPHRASE    - passphrase for that key
+#
+# Run with dry_run on first (default) to exercise secrets, GPG signing, and the
+# build without publishing. Uncheck dry_run for the real release to Central.
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Java client version to publish, e.g. 4.39 (MAJOR.MINOR)"
+        type: string
+        required: true
+      dry_run:
+        description: "Build and GPG-sign only; skip the version commit and the Central upload"
+        type: boolean
+        default: true
+
+permissions:
+  contents: write
+
+concurrency:
+  group: java-release
+  cancel-in-progress: false
+
+env:
+  # Java 17 needs these opens for the Maven publishing plugins' reflective access.
+  MAVEN_OPTS: >-
+    --add-opens=java.base/java.util=ALL-UNNAMED
+    --add-opens=java.base/java.lang.reflect=ALL-UNNAMED
+    --add-opens=java.base/java.text=ALL-UNNAMED
+    --add-opens=java.desktop/java.awt.font=ALL-UNNAMED
+
+jobs:
+  publish:
+    name: Publish to Maven Central
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Validate version
+        env:
+          VERSION: ${{ inputs.version }}
+        run: |
+          set -euo pipefail
+          if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+$ ]]; then
+            echo "::error::version must be MAJOR.MINOR, e.g. 4.39 (got '$VERSION')"
+            exit 1
+          fi
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v5
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: 'maven'
+          server-id: central
+          server-username: MAVEN_CENTRAL_USERNAME
+          server-password: MAVEN_CENTRAL_PASSWORD
+          gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+
+      # client carries the version literally; hdfs3 derives its own version and
+      # its seaweedfs-client dependency from the seaweedfs.client.version property.
+      - name: Set versions in poms
+        env:
+          VERSION: ${{ inputs.version }}
+        run: |
+          set -euo pipefail
+          V=org.codehaus.mojo:versions-maven-plugin:2.16.2
+          mvn -B -ntp -f other/java/client/pom.xml "${V}:set" \
+            -DnewVersion="$VERSION" -DgenerateBackupPoms=false
+          mvn -B -ntp -f other/java/hdfs3/pom.xml "${V}:set-property" \
+            -Dproperty=seaweedfs.client.version -DnewVersion="$VERSION" -DgenerateBackupPoms=false
+
+      - name: Commit version bump
+        if: ${{ !inputs.dry_run }}
+        env:
+          VERSION: ${{ inputs.version }}
+        run: |
+          set -euo pipefail
+          if git diff --quiet; then
+            echo "Poms already at ${VERSION}; nothing to commit."
+          else
+            git config user.name "github-actions[bot]"
+            git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+            git add other/java/client/pom.xml other/java/hdfs3/pom.xml
+            git commit -m "java ${VERSION}"
+            git push
+          fi
+
+      # Tests are skipped here: the integration tests need a live filer, and the
+      # offline unit tests already run on every push in java_unit_tests.yml.
+      # dry_run stops at `install` (build + GPG sign, no upload). A real run deploys.
+      # client goes first either way so its install populates the local repo for hdfs3.
+      - name: Publish seaweedfs-client
+        working-directory: other/java/client
+        env:
+          MAVEN_CENTRAL_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
+          MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
+          DRY_RUN: ${{ inputs.dry_run }}
+        run: |
+          set -euo pipefail
+          [ "$DRY_RUN" = "true" ] && GOAL="clean install" || GOAL="clean deploy"
+          mvn -B -ntp $GOAL -DskipTests
+
+      - name: Publish seaweedfs-hadoop3-client
+        working-directory: other/java/hdfs3
+        env:
+          MAVEN_CENTRAL_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
+          MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
+          DRY_RUN: ${{ inputs.dry_run }}
+        run: |
+          set -euo pipefail
+          [ "$DRY_RUN" = "true" ] && GOAL="clean install" || GOAL="clean deploy"
+          mvn -B -ntp $GOAL -DskipTests